Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
File: ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft (raw, json)
Hash identifier: /hDA5xUTxug9mfgDHjzhCydltS7MPLqmPcHW2BddMts=
Subject key identifier: FC:E2:98:FB:41:96:96:90:FF:0D:44:8D:1C:4F:46:E8:F6:DC:BF:72
Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
Certificate issuer: /CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Certificate serial: 0196AFFC4DD773D3A3018457B560C946B6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
Manifest number: 0520
Signing time: Thu 08 May 2025 13:01:09 +0000
Manifest this update: Thu 08 May 2025 13:01:09 +0000
Manifest next update: Fri 09 May 2025 13:01:09 +0000
Files and hashes: 1: fdOHadbduUc9htmWTS-jPq_zv2U.roa (hash: gZYnTf+6Tdj5UA3epTVfXJljvvit6fFaXTM2YVnS+ZA=)
2: ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl (hash: XZyucuLA1lRefV6xZSMRsIQ2PU7Z64zCJcJgDA7MaLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:4d:d7:73:d3:a3:01:84:57:b5:60:c9:46:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8
Validity
Not Before: May 8 13:01:09 2025 GMT
Not After : May 9 13:01:09 2025 GMT
Subject: CN=fce298fb41969690ff0d448d1c4f46e8f6dcbf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:fe:5d:9e:a1:54:7c:bb:fd:57:e6:1a:b8:
a4:23:4d:8b:19:03:83:2c:61:f7:eb:22:48:b6:87:
ae:4a:d9:bd:90:cf:2d:d6:78:d2:e8:ba:fa:23:a2:
c6:56:9f:11:d1:2b:b1:65:ed:49:04:4b:aa:92:4c:
c4:47:b9:c1:95:4d:db:26:9f:b4:68:8b:5f:e4:2c:
bf:53:5b:00:0d:8d:3a:9e:ae:a5:e1:4a:df:5b:0c:
5b:46:2e:ad:41:ba:6f:e3:62:db:a5:d7:90:17:f3:
ae:61:97:ee:3e:bf:a0:08:3d:2c:15:d3:01:64:0a:
0a:bc:fb:db:1c:9c:e0:6d:01:43:ab:d9:61:06:65:
ef:8c:fc:07:e2:a4:2c:0e:4a:0c:75:b8:13:cd:c1:
80:d2:55:53:af:b6:06:aa:32:e1:1f:56:42:c0:f7:
c6:a1:75:3f:5b:61:e4:8f:bf:cd:89:8b:84:43:f2:
b2:7a:10:7c:3c:a6:f5:1d:ee:65:fb:cc:ca:84:aa:
4a:1f:8a:ae:54:b9:20:5b:e3:e5:f1:b3:be:f8:f9:
e4:2a:52:1a:74:df:48:d1:e2:43:ff:9b:36:5e:b0:
3d:61:5d:e6:9f:ad:b8:bc:e7:eb:c5:1a:73:3d:dc:
2e:b1:e7:74:39:fa:5e:6c:91:a3:42:dd:0f:31:b0:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:98:FB:41:96:96:90:FF:0D:44:8D:1C:4F:46:E8:F6:DC:BF:72
X509v3 Authority Key Identifier:
keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7c:1b:0a:d9:c0:63:2f:ba:d5:d7:e4:f9:95:f7:ac:65:48:
08:aa:a5:1e:e4:19:71:9e:90:b0:ad:2c:fb:5a:bc:f8:c4:46:
77:ce:a0:b4:0e:4e:45:8f:f3:4a:cf:af:2b:4b:8d:97:bb:50:
5c:f5:45:e4:fa:19:b9:53:2b:58:86:b3:61:13:08:a9:c9:ee:
06:8d:67:11:03:0c:eb:28:f3:0a:2a:54:6b:85:05:fb:6a:03:
a7:8a:fa:68:a0:08:b2:e5:1a:05:7f:4c:27:d0:35:28:92:e9:
ac:42:80:21:5d:9a:33:0c:fe:e2:28:b9:e1:40:4d:19:a7:c2:
35:83:1a:16:20:52:0b:1d:73:41:4a:3f:e4:3a:87:a6:3e:01:
fc:31:a4:76:ee:60:63:61:7b:0f:f8:b2:e9:3e:9c:c1:db:31:
ef:31:2b:56:f3:e7:0c:db:a1:36:80:84:3f:b7:a5:19:87:80:
18:ef:cd:06:44:54:84:3f:d8:91:94:e2:dc:ce:ff:41:28:64:
02:f8:57:57:ac:c7:12:c5:0f:95:2a:1c:c6:49:d2:aa:14:e3:
a5:c5:46:b6:6f:df:34:a2:3c:aa:5d:9f:8e:7c:89:1a:9e:af:
41:39:af:89:30:6e:f4:62:ec:0d:36:c1:00:de:51:bb:2f:27:
f3:8b:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:38:13 2025 by rpki-client